Exploitable Authentication Flaw in Ghost CMS by TryGhost
CVE-2026-105676

4.9MEDIUM

Key Information:

Vendor

Tryghost

Status
Ghost
Vendor
CVE Published:
5 October 2026

What is CVE-2026-105676?

A vulnerability in Ghost, a popular Node.js-based content management system, has been identified in how it handles theme translation files. This flaw allows an authenticated Administrator to access and read JSON files located outside the active theme's directory. The exposed files may contain sensitive information, including server configuration secrets, which poses a security risk. The issue has been addressed and mitigated in version 6.64.0 of Ghost.

Affected Version(s)

Ghost >= 1.20.0, < 6.64.0

References

https://github.com/TryGhost/Ghost/security/advisories/GHS...
x_refsource_CONFIRM
https://github.com/TryGhost/Ghost/issues/30635
x_refsource_MISC
https://github.com/TryGhost/Ghost/commit/d2f498694be54907...
x_refsource_MISC

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.